This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft File: CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft (raw, json) Hash identifier: BVsIsF14n2jUn7K9OsfdAmNeRx2PSpdsmB0v3B0BJO8= Subject key identifier: 4E:3C:38:D6:01:F3:13:F1:9B:4D:61:59:5B:B9:19:F7:FD:F9:14:F8 Authority key identifier: 0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92 Certificate issuer: /CN=A9124679/serialNumber=0A480517741076FE763E4E9E32F35BD459893292 Certificate serial: 025C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft Manifest number: 0251 Signing time: Fri 05 Dec 2025 00:10:57 +0000 Manifest this update: Fri 05 Dec 2025 00:10:56 +0000 Manifest next update: Fri 12 Dec 2025 00:10:56 +0000 Files and hashes: 1: CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl (hash: d8zd1Avel4B5Moz+X+wsbqlHwbq5usHQaY7EFYuDGOM=) 2: F7D11060619811ED9437B344C4F9AE02.roa (hash: qAnnelNEaBIcl+tlBGt8/4Pa4w6K1hQge4BvLhS2BHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 604 (0x25c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124679, serialNumber=0A480517741076FE763E4E9E32F35BD459893292 Validity Not Before: Dec 5 00:10:56 2025 GMT Not After : Dec 12 00:10:56 2025 GMT Subject: CN=69322311-bb94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4c:68:f2:ec:5c:9b:6e:c5:2b:6f:24:51:3f: a9:de:ac:30:d5:26:85:45:e2:3b:52:ba:2c:bc:74: a5:67:ba:51:d4:0d:03:2f:2d:2d:51:d7:59:14:bf: 2f:97:ff:d5:34:37:09:8a:6b:cb:a1:00:c7:2a:32: 3f:ef:7f:03:a7:83:94:30:f4:b8:21:47:81:53:9b: ee:63:7a:59:7c:85:70:de:f6:09:c6:8e:20:40:1a: ed:b6:2f:22:f7:ee:1e:62:ac:0f:01:33:96:53:9c: b6:b8:b1:5d:87:78:24:42:6a:2d:9b:36:ed:eb:00: 96:c0:a3:ee:b3:b3:24:7f:12:a3:85:5a:3d:55:b4: 04:38:22:96:f5:6e:c2:ee:c1:52:85:37:10:0a:2e: 7a:7f:7a:91:27:66:bc:f4:a8:cf:d3:15:32:6f:e7: fb:e5:87:9d:b7:cf:13:3a:b2:70:e2:50:73:05:71: 82:ba:f0:e0:f2:74:82:05:62:f5:3e:cd:6b:5b:dc: ef:2a:22:7d:85:97:37:12:93:8e:44:4a:27:b1:95: bd:b2:56:a9:94:6d:7c:ba:dc:b6:b8:6b:4d:49:3b: 95:63:5f:12:33:55:c8:7f:9e:c3:c8:45:fc:47:da: d5:cf:be:56:99:08:69:88:1b:c5:ab:a8:b0:66:9a: 07:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3C:38:D6:01:F3:13:F1:9B:4D:61:59:5B:B9:19:F7:FD:F9:14:F8 X509v3 Authority Key Identifier: keyid:0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:db:3f:ef:7c:1c:8d:f2:07:70:46:a0:2c:39:0b:5b:20:6a: 7c:fb:4e:07:51:70:e5:d0:92:ce:fa:19:51:74:e2:32:76:82: e2:81:f1:59:8e:d6:60:76:b9:ab:86:c9:d4:28:28:b0:f7:e3: 50:e7:2e:89:68:1d:2c:bb:4c:42:28:1b:b2:0a:b4:46:cb:91: ee:9a:2b:a3:a2:7d:28:75:74:56:fb:21:10:34:68:8b:74:49: 9d:75:dc:43:f0:be:3e:a9:06:6a:9d:e9:89:cc:8b:9a:fe:df: 21:97:4e:cd:9a:2b:29:8e:b4:1d:02:a3:b1:d0:5d:21:97:8f: 85:32:5d:ee:9b:95:b3:0f:fa:22:4a:48:97:dd:1c:16:3e:74: a7:31:95:75:ad:36:01:bc:08:fb:57:3a:64:44:af:cf:37:b3: 53:12:70:19:d6:97:87:aa:1c:c9:5f:3a:9f:34:46:b3:0d:3e: c5:0c:07:05:f5:15:cb:81:c2:6a:71:b7:a2:49:98:8c:74:8e: 7c:67:06:ac:6c:b1:7f:84:44:0c:b3:1f:a8:3c:6f:c8:ef:a1: 0c:ce:a2:b8:a0:22:ff:cd:e2:95:e1:04:2b:02:a6:c0:67:d7: 1c:be:44:e2:64:b7:95:3c:86:7d:43:6a:09:ff:b4:63:b8:18: 4e:67:c7:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ2NzkxMTAvBgNVBAUTKDBBNDgwNTE3NzQxMDc2RkU3NjNFNEU5RTMyRjM1QkQ0 NTk4OTMyOTIwHhcNMjUxMjA1MDAxMDU2WhcNMjUxMjEyMDAxMDU2WjAYMRYwFAYD VQQDEw02OTMyMjMxMS1iYjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzExo8uxcm27FK28kUT+p3qww1SaFReI7UrosvHSlZ7pR1A0DLy0tUddZFL8v l//VNDcJimvLoQDHKjI/738Dp4OUMPS4IUeBU5vuY3pZfIVw3vYJxo4gQBrtti8i 9+4eYqwPATOWU5y2uLFdh3gkQmotmzbt6wCWwKPus7MkfxKjhVo9VbQEOCKW9W7C 7sFShTcQCi56f3qRJ2a89KjP0xUyb+f75Yedt88TOrJw4lBzBXGCuvDg8nSCBWL1 Ps1rW9zvKiJ9hZc3EpOOREonsZW9slaplG18uty2uGtNSTuVY18SM1XIf57DyEX8 R9rVz75WmQhpiBvFq6iwZpoHcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE48ONYB 8xPxm01hWVu5Gff9+RT4MB8GA1UdIwQYMBaAFApIBRd0EHb+dj5OnjLzW9RZiTKS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDY3OS9GNUI3OEE4ODYx OTQxMUVEOENEQkEyM0VDNEY5QUUwMi9Da2dGRjNRUWR2NTJQazZlTXZOYjFGbUpN cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrZ0ZGM1FRZHY1MlBrNmVNdk5iMUZtSk1wSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDY3OS9GNUI3OEE4ODYxOTQxMUVEOENEQkEyM0VDNEY5QUUwMi9Da2dGRjNRUWR2 NTJQazZlTXZOYjFGbUpNcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt2z/vfByN8gdwRqAsOQtbIGp8+04HUXDl0JLO+hlRdOIydoLigfFZ jtZgdrmrhsnUKCiw9+NQ5y6JaB0su0xCKBuyCrRGy5Humiujon0odXRW+yEQNGiL dEmdddxD8L4+qQZqnemJzIua/t8hl07NmispjrQdAqOx0F0hl4+FMl3um5WzD/oi SkiX3RwWPnSnMZV1rTYBvAj7VzpkRK/PN7NTEnAZ1peHqhzJXzqfNEazDT7FDAcF 9RXLgcJqcbeiSZiMdI58ZwasbLF/hEQMsx+oPG/I76EMzqK4oCL/zeKV4QQrAqbA Z9ccvkTiZLeVPIZ9Q2oJ/7RjuBhOZ8c0 -----END CERTIFICATE-----Generated at Sat Dec 6 12:25:24 2025 by rpki-client